Getting Data In

I've exported an app to a client, but why were the sourcetypes not exported automatically?

vtsguerrero
Contributor

I've exported an app to a client, but the sourcetypes were not exported automatically. Shouldn't they be inside the app's prop's config?
In total, they are 8 sourcetype now now, but they only exist in my local Splunk server...

Tags (3)
0 Karma

alacercogitatus
SplunkTrust
SplunkTrust

Permissions might be the culprit here. If the sourcetype configurations are in the user folder, then they don't get exported with the app. If they are in the local folder of a different app, then they won't get exported.

Run this to see where it is on your local Splunk server, and then move it to the app where it needs to be.

$SPLUNK_HOME/bin/splunk cmd btool props list --debug

Look for your source type, it will show you where the config is being pulled from.

0 Karma

vtsguerrero
Contributor

When I open the btool.exe it immediately closes, can't run the command...

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud | Unified Identity - Now Available for Existing Splunk ...

Raise your hand if you’ve already forgotten your username or password when logging into an account. (We can’t ...

Index This | How many sides does a circle have?

February 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...